A
key-establishment protocol, used to secure
VPN communications. If one
encryption key is compromised only data encrypted by that specific key is
compromised. For
perfect forward secrecy (PFS) to
exist the key used to protect transmission of
data must
not be used to derive any additional keys.